HTS Basic Web 4: Alter the Hidden Fields

In the fourth basic web mission, Network Security Sam apparently hasnt learnt anything from his prior mistake. In the third basic web mission, we extracted information from hidden form fields and thereby found out the name of a password file. The procedure is essentially the same in this mission. As usually, check the source code first. These snipets have been formated for easier reading:

As you can see, this level contains two forms. The upper one is the Send password to Sam button, and the lower one is the password field. You should already have noticed the highly suspicious hidden field in the upper form. Its purpose is obvious: it supplies the email address that the password will be emailed to. From merely knowing this address, you cannot achieve anything (except if you managed to hack the hulla-balloo.com server). Therefore, you should alter the field to contain your email address instead of Sams.

In order to enter your own information in to, the hidden field, you can create a local copy of the form. In your modified version, you can either change webmaster to your own email address, or change the type="hidden" to type="text". The prior changes the email address automatically, while the latter allows you to enter another address.

If you are pedantic and want your local version to validate, use the following code.

Remember to change the URL from local to absolute (http://hackthissite.org/missions/basic/4/level4.php instead of /missions/basic/4/level4.php). Save the file as e.g. hackthissite.htm, then open it in your web browser.

Post navigation

Your email address will not be published. Required fields are marked *

Comment

Name *

Email *

Website

Save my name, email, and website in this browser for the next time I comment.

Welcome to Timblog!

I’m Tim Johansson, and this is where I store everything that I write. You can browse through everything on this page, or you could choose a category that interests you in the top bar. If you have anything to say, don’t hesitate to comment — I love comments, too. Enjoy.

A new film tells the story of Carlos Kaiser, who was one of the most famous footballers in Brazil for over 20 years – even though he had no intention of ever kicking a ballYou might know the voiceover at the start of The Big Lebowski. As tumbleweed meanders through Los Angeles, Sam Elliott introduces […]

Rainfall affects our mood, our propensity to commit crime and how hungry we feel – but why?It’s raining, it’s pouring, the old man is snoring. He bumped his head when he went to bed, and he couldn’t get up in the morning. This was possibly because in the absence of sunlight his body was still […]

A trip to North Carolina to study bluegrass yielded this lesson: Earl Scruggs was the greatest there ever wasI spent a couple of months last year studying bluegrass in North Carolina, and I learned that there are is one tune you never ask a banjo player to play for you. Foggy Mountain Breakdown, Earl Scruggs's […]

When Johan Cruyff sold Jan Olsson the mother of all dummies with the subtlest of swerves, the Dutch captain’s signature move became the enduring symbol of Total FootballIt’s the defining image of the 1974 World Cup; the defining image of the great Dutch team of the 70s; the defining image of one of the most […]

Random tales from the 1966 tournament that have absolutely nothing to do with Azerbaijani linesmen, Kenneth Wolstenholme or Pickles the Dog1. The branding for the 1966 Football World Championship for the Jules Rimet Trophy was all over the shop. But at least Fifa were trying. The 1966 finals was the first to be blessed with […]

One of the greatest World Cup games has been largely overshadowed by the West German keeper’s dastardly actThe semi-final stage of the World Cup has, on balance, not been particularly kind to France. In 1958, the free-scoring team of Just Fontaine and Raymond Kopa were more than holding their own against Brazil until Vavá clattered […]

When Holland faced Germany it was always ‘problematic’, never more so than at Italia 90 when two rivals clashedA sort of photographic antithesis of Bobby Moore’s post shirt-swap embrace with Pelé in 1970, it is one of the iconic World Cup images. Four years after the photograph was taken, it was further seared on the […]

War-torn country’s players travelled to the 1982 tournament as heroes but were shunned on their return after some shockingly gung-ho tactics brought about a 10-1 defeat to HungaryOne of the smaller, yet still very pleasing features of the great 1982 World Cup was that even the goal celebrations had a poetic quality. The joy of […]

In open rebellion against their manager, France’s 2010 squad self-destructed as Thierry Henry watched impassivelyThierry Henry had more pressing matters to attend to before he could lose himself in his New York dreamscape [he was joining New York Red Bulls from Barcelona in the summer 2010], starting with his uneasy position within the French national […]

From pop-up bike lanes to painted potholes, here are the imaginative ways frustrated cyclists are taking action to create a safer environmentAcross the world, transport planning and infrastructure tends to favour the car, and facilities for cyclists and pedestrians are an afterthought. In response, frustrated urban cyclists have thrown caution to the wind and written […]